Check CAA records before issuing certs

More dig commands

• Resolve SRV records for service discovery
  dig +short SRV _sip._tcp.example.comcopy

  Get priority/weight/port/target for a service; used by AD, SIP, XMPP

• Force TCP and show remaining TTL
  dig +tcp +ttlunits +noall +answer example.com @8.8.8.8copy

  Test TCP/53 reachability; +ttlunits prints TTL as 1h/30m not raw seconds

• Clean answer-only output
  dig +noall +answer example.comcopy

  Strip headers/stats; show only the answer section for scripting/diffs

• Find authoritative nameservers via NS chase
  dig +nssearch example.comcopy

  Query each authoritative NS directly; reveals SOA serial mismatches between them

• Attempt a zone transfer (AXFR)
  dig axfr @ns1.example.com example.comcopy

  Dump full zone if AXFR is open; note: success on public NS is a misconfig

all 11 dig commands →